Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 22:15:22 +0000 *************** ✏️Title: CVE-2025-5697 - Brilliance Golden Link Secondary System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5697 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 22:15:22 +0000 *************** ✏️Title: CVE-2025-5698 - Brilliance Golden Link Secondary System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5698 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 22:06:03 GMT *************** ✏️Title: Hardening Linux untuk Pemula: Biar Server Kamu Nggak Jadi Tumbal *************** 📎Link: https://medium.com/p/10e73403b001 *************** ⚙️Tags: #cybersecurity #idnbootcampcyber #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 22:32:09 GMT *************** ✏️Title: OneNote Malware Analysis *************** 📎Link: https://medium.com/p/f02d7fc38fd7 *************** ⚙️Tags: #dynamic_analysis #miss_robot #tryhackme #malware_analysis #static_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 23:01:21 GMT *************** ✏️Title: Metasploit: Exploitation | THM *************** 📎Link: https://medium.com/p/4380d31472ec *************** ⚙️Tags: #tryhackme #tryhackme_writeup #cybersecurity #metasploit #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 22:16:27 GMT *************** ✏️Title: Vulnlab — Sync Walkthrough *************** 📎Link: https://medium.com/p/9f3e47999408 *************** ⚙️Tags: #linux #ethical_hacking #hacking #vulnlab #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 22:32:09 GMT *************** ✏️Title: OHSINT WALKTHROUGH : TRYHACKME *************** 📎Link: https://medium.com/p/db2ba5a01d93 *************** ⚙️Tags: #ctf_writeup #tryhackme #penetration_testing #ctf #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:36:11 +0200 *************** ✏️Title: CVE-2025-5702 | GNU C Library 2.39 on Power10 control flow *************** 📎Link: https://vuldb.com/?id.311266 *************** ⚙️Information: #Vendor: GNU #Product: C Library #Type: Software Library #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:36:12 +0200 *************** ✏️Title: CVE-2025-5745 | GNU C Library 2.40 on Power10 control flow *************** 📎Link: https://vuldb.com/?id.311267 *************** ⚙️Information: #Vendor: GNU #Product: C Library #Type: Software Library #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:36:25 +0200 *************** ✏️Title: CVE-2025-49009 | Erudika para up to 1.50.7 FacebookAuthFilter.java log file (GHSA-qx7g-fx8q-545g) *************** 📎Link: https://vuldb.com/?id.311268 *************** ⚙️Information: #Vendor: Erudika #Product: para #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:36:53 +0200 *************** ✏️Title: CVE-2025-48493 | yiisoft yii2-redis up to 2.0.19 AUTH log file (GHSA-g3p6-82vc-43jh) *************** 📎Link: https://vuldb.com/?id.311269 *************** ⚙️Information: #Vendor: yiisoft #Product: yii2_redis #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:37:07 +0200 *************** ✏️Title: CVE-2025-48133 | Uncanny Owl Uncanny Automator Plugin up to 6.4.0.2 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311270 *************** ⚙️Information: #Vendor: Uncanny Owl #Product: Uncanny Automator Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:37:23 +0200 *************** ✏️Title: CVE-2025-43026 | HP Support Assistant 8.1.52.1/8.7.50.3 permissions *************** 📎Link: https://vuldb.com/?id.311271 *************** ⚙️Information: #Vendor: HP #Product: Support Assistant #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:38:00 +0200 *************** ✏️Title: CVE-2025-47966 | Microsoft Power Automate for Desktop information disclosure *************** 📎Link: https://vuldb.com/?id.311272 *************** ⚙️Information: #Vendor: Microsoft #Product: Power Automate for Desktop #Type: Automation Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:10 +0200 *************** ✏️Title: CVE-2025-4964 | WP Online Users Stats Plugin up to 1.0.0 on WordPress table_name sql injection *************** 📎Link: https://vuldb.com/?id.311273 *************** ⚙️Information: #Product: WP Online Users Stats Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:10 +0200 *************** ✏️Title: CVE-2025-2935 | Anti-Spam Plugin up to 2024.7 on WordPress ss_option_maint.php ss_option_maint cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311274 *************** ⚙️Information: #Product: Anti_Spam Plugin #Type: Anti_Spam Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:11 +0200 *************** ✏️Title: CVE-2025-1777 | BM Content Builder Plugin up to 3.16.2.1 on WordPress ux_cb_page_options_save cross site scripting *************** 📎Link: https://vuldb.com/?id.311275 *************** ⚙️Information: #Product: BM Content Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:33 +0200 *************** ✏️Title: CVE-2025-5733 | Modern Events Calendar Lite Plugin up to 7.21.9 on WordPress improper authentication *************** 📎Link: https://vuldb.com/?id.311276 *************** ⚙️Information: #Product: Modern Events Calendar Lite Plugin #Type: Calendar Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:36 +0200 *************** ✏️Title: CVE-2025-5486 | WP Email Debug Plugin up to 1.1.0 on WordPress Password Reset WPMDBUG_handle_settings authorization *************** 📎Link: https://vuldb.com/?id.311277 *************** ⚙️Information: #Product: WP Email Debug Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 23:39:48 +0200 *************** ✏️Title: CVE-2025-1778 | Art Theme Plugin up to 3.12.2.3 on WordPress arttheme_theme_option_restore authorization *************** 📎Link: https://vuldb.com/?id.311278 *************** ⚙️Information: #Product: Art Theme Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security